63825a586ebc7264e5cf4112f296e6838644f519e8ab4157bab4ac7c5dd35af6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0301166b964cc152af6eb076c746dc4_JaffaCakes118
Size

1.1MB
Sample

240415-dwlf8adc76
MD5

f0301166b964cc152af6eb076c746dc4
SHA1

1867bac0cca4042eb9e4557e4c18f7ad8d55e099
SHA256

63825a586ebc7264e5cf4112f296e6838644f519e8ab4157bab4ac7c5dd35af6
SHA512

b39c9d9989fe24120f92cf5eb125a023eb1f3955673bc3c915f6250686695ad9291559af865d331ab1d6fe52f32ed7a395f9e341faddc9b1d60733d0cc668d94
SSDEEP

12288:JKaiFc4ybOHHTurfwZjvvJ8Wo/jnN/TjNrlyTkXSkkIasq6Jxj20LST19Kpu4mMk:M9XurfbWOFfN4rRIa2j25T1spDmMk

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  
  f0301166b964cc152af6eb076c746dc4_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  f0301166b964cc152af6eb076c746dc4
- SHA1
  
  1867bac0cca4042eb9e4557e4c18f7ad8d55e099
- SHA256
  
  63825a586ebc7264e5cf4112f296e6838644f519e8ab4157bab4ac7c5dd35af6
- SHA512
  
  b39c9d9989fe24120f92cf5eb125a023eb1f3955673bc3c915f6250686695ad9291559af865d331ab1d6fe52f32ed7a395f9e341faddc9b1d60733d0cc668d94
- SSDEEP
  
  12288:JKaiFc4ybOHHTurfwZjvvJ8Wo/jnN/TjNrlyTkXSkkIasq6Jxj20LST19Kpu4mMk:M9XurfbWOFfN4rRIa2j25T1spDmMk
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2